commit
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow involves executing git commands such as
git status,git diff, andgit committo manage repository changes as defined inSKILL.mdandguide.md. - [COMMAND_EXECUTION]: The 'Reality Check' section in
guide.mdinstructs the agent to runuds check(a tool from the vendor asiaostrich) andnpx commitlintto validate commit message standards. - [EXTERNAL_DOWNLOADS]: The skill uses
npxinguide.mdto fetch thecommitlintpackage from the npm registry, which is a well-known service registry. - [REMOTE_CODE_EXECUTION]: The validation step utilizes
npxto dynamically execute thecommitlinttool from a remote source. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection from the files it processes.
- Ingestion points: The skill reads untrusted data from the local repository via
git diff --stagedandgit statusas specified inSKILL.md. - Boundary markers: None. No delimiters or specific instructions are provided to the agent to ignore or isolate content within the git diffs.
- Capability inventory: The skill can modify the repository history using
git commitand execute shell commands throughgitandnpx. - Sanitization: There is no evidence of sanitization or escaping applied to the content of the code diffs before they are processed by the LLM to generate the commit message.
Audit Metadata